Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.mft
File: qDYJyI8427VIofAvif8pu20Yhk4.mft (raw, json)
Hash identifier: x0RxaBTOEAqiNfSr9HxOWRu9LidvVfUM0qqjtVMvsxY=
Subject key identifier: 57:3C:E4:E0:BD:E2:E0:B6:7D:1F:20:07:95:A5:EF:0D:C6:49:4C:D0
Authority key identifier: A8:36:09:C8:8F:38:DB:B5:48:A1:F0:2F:89:FF:29:BB:6D:18:86:4E
Certificate issuer: /CN=a83609c88f38dbb548a1f02f89ff29bb6d18864e
Certificate serial: 0197CB39BB3EBF4EC2BE48319E9044D8A5D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qDYJyI8427VIofAvif8pu20Yhk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.mft
Manifest number: 0350
Signing time: Wed 02 Jul 2025 13:00:47 +0000
Manifest this update: Wed 02 Jul 2025 13:00:47 +0000
Manifest next update: Thu 03 Jul 2025 13:00:47 +0000
Files and hashes: 1: _aJQ6oyDSsBM9CQBM0bENVTAfYk.roa (hash: TGsiDKL9QYKUEyLtO8kxrwWDCHZz/h4CK165UgZMbZA=)
2: qDYJyI8427VIofAvif8pu20Yhk4.crl (hash: OnbcB8cKJHjXUb+BMC8OlZ7y9krRwNt9A66cJ83WjBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qDYJyI8427VIofAvif8pu20Yhk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:39:bb:3e:bf:4e:c2:be:48:31:9e:90:44:d8:a5:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83609c88f38dbb548a1f02f89ff29bb6d18864e
Validity
Not Before: Jul 2 13:00:47 2025 GMT
Not After : Jul 3 13:00:47 2025 GMT
Subject: CN=573ce4e0bde2e0b67d1f200795a5ef0dc6494cd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:49:3d:c4:6a:f3:b4:62:14:c6:e8:df:81:64:
00:02:f6:fb:01:9c:99:c2:c8:f9:0a:13:42:ae:85:
ff:cf:7c:ed:a5:8a:70:4f:0f:24:f5:0a:bc:1f:a6:
a1:09:f0:76:15:ff:16:f4:a6:7c:6e:fd:4e:68:fd:
34:2c:e1:7b:0e:36:18:2d:a9:23:18:cf:ff:2c:c7:
86:07:d9:0f:9a:5d:65:a2:11:e3:0b:4e:33:3b:e1:
c3:15:7f:ff:a3:24:42:df:38:96:c6:33:9d:36:ec:
a3:6c:4f:cc:08:4b:ec:16:2b:49:33:aa:a2:ae:1b:
32:91:d9:f3:9a:75:ba:b1:82:02:25:70:62:e5:9f:
0d:82:99:d0:d7:9c:03:80:87:3b:20:27:b9:d4:da:
6f:1b:b5:f5:75:86:bc:36:27:fd:ca:56:cc:89:25:
26:d2:80:f7:ae:95:e4:d3:fb:d0:af:e4:1f:dc:1c:
63:30:5e:96:a2:16:38:0f:fa:25:6b:f2:ba:38:bd:
91:b9:50:fd:ec:75:ea:31:30:34:00:5e:d2:51:c3:
80:47:27:6d:1e:8f:16:ed:d1:e3:8a:b6:10:a4:1c:
b9:ce:99:f1:a8:25:d3:be:2d:99:a0:0a:18:1d:45:
33:fd:46:1a:ce:f2:e1:47:68:3b:51:b8:61:a3:62:
6b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:3C:E4:E0:BD:E2:E0:B6:7D:1F:20:07:95:A5:EF:0D:C6:49:4C:D0
X509v3 Authority Key Identifier:
keyid:A8:36:09:C8:8F:38:DB:B5:48:A1:F0:2F:89:FF:29:BB:6D:18:86:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qDYJyI8427VIofAvif8pu20Yhk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:46:c0:25:16:f2:2e:ce:03:de:6e:a7:d6:e2:92:63:a2:1f:
63:24:3c:42:b0:5c:8c:37:26:91:19:70:4d:24:a9:67:eb:e9:
d8:c1:8d:e8:10:ca:4d:91:89:1f:97:19:d5:01:64:83:d9:5e:
3a:a6:41:92:06:c8:1f:7a:f2:d5:80:65:0d:39:e2:d0:58:49:
e9:34:0c:5a:bf:f6:ed:59:5d:ab:41:fa:21:f7:49:00:d5:83:
aa:3e:1f:1b:ae:f8:f4:1e:62:81:b2:ba:9b:0b:bf:91:b2:e0:
f6:7b:bd:82:13:c2:4d:b6:00:12:c1:be:37:46:21:ba:05:ba:
6b:11:53:75:14:a2:a7:51:47:26:e7:8a:06:4e:46:20:08:b4:
b4:6d:70:bf:8a:12:ad:0c:9b:c4:b9:99:6a:6a:7f:43:f5:ed:
e7:be:5d:bc:8d:b8:de:3f:3e:68:0e:49:44:76:9b:4f:54:1c:
2b:24:79:14:e3:cc:db:39:fb:b9:69:79:c4:9f:74:e3:54:9e:
1f:a4:c0:87:61:35:39:3b:51:33:c5:38:2e:a2:cf:89:b3:05:
d1:34:d2:47:25:a4:05:e9:2f:63:58:fb:c9:cb:54:08:12:1d:
ac:a3:56:8c:bf:e8:f5:97:4d:d3:20:b7:57:77:ad:26:2f:7a:
70:e6:d3:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 16:32:51 2025 by rpki-client